Privacy policy

Who is responsible

What we collect, and why

If you are a yard (with an account)

• Your name, your email address and your password, kept only as a hash nobody can read back: to open and protect your account.
• Your yard's name, telephone, address and position on the map: to show them on its public storefront, and to check the yard before publishing it.
• Its OPC permit number, if you give it: for that check only. It is never shown to the public.
• The name and email address of the people you add to your yard, and the password you give them, hashed like yours: to give them access.
• Your vehicles and their photos: to show them on your storefront. A photo loses its metadata on upload, the phone's GPS position included.
• The browser or device of each sign-in, as it names itself, with when it was opened and when it was last used: for the security of your account.
• Your subscription's payments, recorded by Piezia: date, amount, method, reference, months paid and period covered; the corrections of its end date, with their reason; and the reminders of its end prepared for your yard, sent to its owner's address once email sending is in service: to keep your subscription and remind you of its end.
• The withdrawal of one of your vehicles from the storefront by Piezia, with its reason, which you read on the vehicle: so that you know why it is no longer shown.

If you are looking for a part (no account)

• Nothing is asked to search.
• If you ask for an arrival alert: your email address, the page's language and the car you are looking for. Then, for each mail, the car it announced and its date. They are used to write to you in your language when a matching car arrives, and never twice about the same one.
• If you press “Find me”: your position, rounded to about 110 metres as soon as your browser gives it, sorts the yards from nearest to farthest and gives the distance to each. It is not kept. Your browser also places it on the map and so asks Mapbox for the map of an area that contains it.

For everyone's security and to limit abuse: the record of each sign-in, sign-up or change of password or address, with the email address and the IP address; the email address and the IP address of each password reset request, even when no account matches it; the IP address of each alert request. The web server also logs the IP address and the page requested on each visit, without a search's position or the links sent by email.

For a Piezia administrator: the two-factor authentication key, encrypted, and ten recovery codes, kept only as a hash; for each session, when the code was given; and the record of each code typed, with the email address and the IP address: so that the administration opens to its administrator only.

The record of sensitive actions, which is never changed or erased: the approval or suspension of a yard; the recording or voiding of a payment, the start of a trial, the correction of a subscription's end date and each reminder noted; the withdrawal of a vehicle from the storefront or its return; the disabling, reactivation or data export of an account; the addition or removal of an administrator, the activation of their two-factor authentication and the use of their recovery codes; each time with the reason or note written and the administrator's IP address, and, when the decision writes to the yard, the subject and text of that email. And the reuse of a former employee's account, with the identifier of that account and, where there is one, of the yard hiring them. It is used to know who did what, and when.

Each vehicle's views are counted without identifying anyone: the count holds only a vehicle, a day and a number. Searches are counted the same way, by day, make and model, without identifying anyone or keeping an IP address.

How long we keep it

An account: name, email address, hashed password

Until its deletion is requested (see Your rights)

A yard, its storefront and its vehicles

With no time limit: a yard and its vehicles are never erased, only taken out of public view, for example when the yard's only member has their account deleted. A photo replaced by another is erased.

The record of sensitive actions

With no time limit: it is never changed or erased

A subscription's payments, the corrections of its end date and its end reminders

With no time limit: a payment is never changed or erased, it is voided with a reason

An administrator's two-factor authentication key

Until the role is removed or the key is reset

A sign-in session

Ends at most 30 days after it was last used

An ended session

Deleted 30 days later

A session closed by signing out

Deleted 90 days after

The record of a sign-in, a sign-up, a change of password or address, or a two-factor code, with the email address and the IP address

7 days

An administrator's recovery code, hashed

Erased 30 days after it was used, replaced or withdrawn with the role

A password reset request, with the email address typed, or an address confirmation link

30 days

The IP address of a password reset or alert request

1 day

An alert never confirmed

7 days

A stopped alert, with the list of its mails

Deleted 90 days after it stopped

A confirmed alert

Stopped after 365 days without a single mail, then deleted like a stopped alert

The web server's log: IP address, page requested

Each file, replaced by the next one when it is full, is deleted 7 days later

The database backups

30 days, except the most recent, kept until the next one

The daily copy of the server's whole disk, made by the hosting provider: database, files, logs and backups

Kept 24 hours by OVHcloud

Where the data is, and who can see it

The data is hosted in Quebec, by OVHcloud, in its Beauharnois data centre. OVHcloud also keeps a daily copy of the server there. OVHcloud accesses the data only to provide its service.

Mapbox draws the maps. Your browser loads them from Mapbox's servers, which then receive, as any website does, your IP address and the name and version of your browser, as well as the area of the map shown and the identifier described below. Mapbox is a United States company: this information may therefore be processed outside Quebec.

When you type your yard's address, at sign-up or in « My yard », what you type is sent to Mapbox to suggest addresses and find its position on the map: this information may therefore also be processed outside Quebec.

Yards can read a vehicle's VIN with their phone's camera to fill in its make, model and year. The VIN is read on the phone and is not kept. Only the characters that describe the model (the first eight, the year and the plant) go through our servers to NHTSA's public vPIC database, in the United States; never the serial number, which identifies one specific vehicle.

To send you its emails, Piezia uses Resend, which receives your email address and the content of the message. Resend is a United States company: this information may therefore be processed outside Quebec.

An email you write to the person in charge first passes through Cloudflare, which forwards it to their mailbox, so Cloudflare receives your email address and what you wrote. Cloudflare is a United States company: this information may therefore be processed outside Quebec.

Piezia sells no information and runs no targeted advertising.

Cookies and browser storage

Two cookies, both needed for the site to work, and neither used for tracking:

• Your session cookie, while you are signed in. The page's scripts cannot read it.
• Your language cookie, which holds only its code, fr or en, for your browsing session.

The yards' space, on the site and in the app, keeps on your device who is signed in, their yard, and a sign-out waiting for the network. The app also keeps there the cars and photos not sent yet, and the sheet being filled in.

Mapbox's maps keep an anonymous identifier in your browser, renewed every day, which Mapbox receives with each map load to count them.

No audience measurement or advertising tool.

Your rights

You can ask for access to your information, for its correction or a copy in a common format, for the deletion of your account, and withdraw your consent. A yard's information can be corrected, but is not erased (see above). We answer within 30 days.

To exercise these rights, write to the person in charge:

If our answer does not satisfy you, you can turn to the Commission d'accès à l'information du Québec.

Privacy incident

If an incident presents a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information, as the law requires.